Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-17 19:58:59.347 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 19:58:59.146 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 19:59:12.104 00:00:10.365 TCP 23.104.0.1:54328 -> 1.101.0.1:3000 11 1507 1 2025-11-17 19:59:23.989 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33008 10 6452 1 2025-11-17 20:00:12.508 00:00:10.326 TCP 23.104.0.1:57112 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:00:24.208 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48602 10 6452 1 2025-11-17 20:01:12.874 00:00:10.366 TCP 23.104.0.1:38948 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:01:24.422 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40440 10 6452 1 2025-11-17 20:02:13.274 00:00:10.369 TCP 23.104.0.1:39840 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:02:24.600 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55204 10 6452 1 2025-11-17 19:58:58.877 00:05:04.910 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 20:03:13.680 00:00:10.379 TCP 23.104.0.1:35906 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:03:24.808 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53884 10 6452 1 2025-11-17 20:03:59.525 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 20:03:59.163 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 19:59:58.879 00:05:04.904 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 20:04:14.117 00:00:10.375 TCP 23.104.0.1:53434 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:04:24.981 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:55116 10 6452 1 2025-11-17 20:05:14.536 00:00:10.848 TCP 23.104.0.1:34624 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:05:25.208 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34972 10 6452 1 2025-11-17 20:06:15.426 00:00:10.361 TCP 23.104.0.1:48392 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:06:25.428 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:33272 10 6452 1 2025-11-17 20:07:15.831 00:00:10.335 TCP 23.104.0.1:52816 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:07:25.596 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51734 10 6452 1 2025-11-17 20:08:16.204 00:00:10.361 TCP 23.104.0.1:44576 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:08:25.809 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37716 10 6452 1 2025-11-17 20:08:59.484 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 20:08:59.344 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 20:04:58.880 00:05:04.908 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 20:09:16.608 00:00:10.363 TCP 23.104.0.1:48250 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:09:26.026 00:00:10.408 TCP 1.101.0.1:3000 -> 22.102.0.1:50980 10 6452 1 2025-11-17 20:05:58.881 00:05:04.903 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 20:10:17.011 00:00:10.362 TCP 23.104.0.1:52916 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:10:26.468 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39202 10 6452 1 2025-11-17 20:11:17.431 00:00:10.349 TCP 23.104.0.1:44534 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:11:26.680 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58532 10 6452 1 2025-11-17 20:12:17.815 00:00:10.365 TCP 23.104.0.1:49688 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:12:26.897 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58116 10 6452 1 2025-11-17 20:13:18.215 00:00:10.325 TCP 23.104.0.1:35506 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:13:27.086 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41782 10 6452 1 2025-11-17 20:13:59.834 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 20:13:59.758 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 20:14:18.578 00:00:10.372 TCP 23.104.0.1:55950 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:14:27.309 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50040 10 6452 1 2025-11-17 20:10:58.882 00:05:04.906 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 20:15:18.987 00:00:10.365 TCP 23.104.0.1:53446 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:15:27.520 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57276 10 6452 1 2025-11-17 20:11:58.886 00:05:04.899 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 20:16:19.390 00:00:10.322 TCP 23.104.0.1:53988 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:16:27.736 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52116 10 6452 1 2025-11-17 20:17:19.751 00:00:10.360 TCP 23.104.0.1:47454 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:17:27.958 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49698 10 6452 1 2025-11-17 20:18:20.152 00:00:10.324 TCP 23.104.0.1:53628 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:18:28.183 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59608 10 6452 1 2025-11-17 20:18:59.673 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 20:18:59.695 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 20:19:20.513 00:00:10.368 TCP 23.104.0.1:35466 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:19:28.351 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41312 10 6452 1 2025-11-17 20:20:20.917 00:00:10.367 TCP 23.104.0.1:36728 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:20:28.576 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41966 10 6452 1 2025-11-17 20:16:58.885 00:05:04.904 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 20:21:21.324 00:00:10.367 TCP 23.104.0.1:57036 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:21:28.792 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60378 10 6452 1 2025-11-17 20:17:58.888 00:05:04.899 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 20:22:21.725 00:00:10.374 TCP 23.104.0.1:40838 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:22:29.010 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:33044 10 6452 1 2025-11-17 20:23:22.139 00:00:10.372 TCP 23.104.0.1:57076 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:23:29.196 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38994 10 6452 1 2025-11-17 20:23:59.812 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 20:24:00.078 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 20:24:22.548 00:00:10.370 TCP 23.104.0.1:38152 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:24:29.409 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42840 10 6452 1 2025-11-17 20:25:22.955 00:00:10.364 TCP 23.104.0.1:59716 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:25:29.626 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40920 10 6452 1 2025-11-17 20:26:23.355 00:00:10.328 TCP 23.104.0.1:51750 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:26:29.801 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53736 10 6452 1 2025-11-17 20:22:58.888 00:05:04.903 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 20:27:23.720 00:00:10.442 TCP 23.104.0.1:47662 -> 1.101.0.1:3000 15 1926 1 2025-11-17 20:27:30.011 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:52868 12 10369 1 2025-11-17 20:23:58.891 00:05:04.896 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 20:28:24.202 00:00:10.364 TCP 23.104.0.1:57404 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:28:30.253 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36630 10 6452 1 2025-11-17 20:28:59.795 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 20:28:59.858 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 20:29:24.602 00:00:10.359 TCP 23.104.0.1:51564 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:29:30.466 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41128 10 6452 1 2025-11-17 20:30:24.996 00:00:10.328 TCP 23.104.0.1:56912 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:30:30.679 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39756 10 6452 1 2025-11-17 20:31:25.360 00:00:10.320 TCP 23.104.0.1:45572 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:31:30.890 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:40664 10 6452 1 2025-11-17 20:32:25.718 00:00:10.393 TCP 23.104.0.1:46078 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:32:31.080 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52846 10 6452 1 2025-11-17 20:28:58.889 00:05:04.902 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 20:33:26.155 00:00:10.324 TCP 23.104.0.1:35936 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:33:31.291 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40112 10 6452 1 2025-11-17 20:33:59.885 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 20:34:00.017 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 20:29:58.892 00:05:04.897 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 20:34:26.518 00:00:10.359 TCP 23.104.0.1:39364 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:34:31.505 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40566 10 6452 1 2025-11-17 20:35:26.920 00:00:10.388 TCP 23.104.0.1:43126 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:35:31.711 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54812 10 6452 1 2025-11-17 20:36:27.344 00:00:10.365 TCP 23.104.0.1:33086 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:36:31.922 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53900 10 6452 1 2025-11-17 20:37:27.749 00:00:10.360 TCP 23.104.0.1:46642 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:37:32.142 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37752 10 6452 1 2025-11-17 20:38:28.142 00:00:10.364 TCP 23.104.0.1:53628 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:38:32.362 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60052 10 6452 1 2025-11-17 20:39:00.101 00:00:00.040 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 20:39:00.240 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 20:34:58.891 00:05:04.903 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 20:39:28.545 00:00:10.364 TCP 23.104.0.1:40248 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:39:32.576 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50436 10 6452 1 2025-11-17 20:35:58.892 00:05:04.898 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 20:40:28.949 00:00:10.368 TCP 23.104.0.1:45528 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:40:32.790 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:45448 10 6452 1 2025-11-17 20:41:29.352 00:00:10.361 TCP 23.104.0.1:56368 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:41:33.028 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51004 10 6452 1 2025-11-17 20:42:29.752 00:00:10.511 TCP 23.104.0.1:60042 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:42:33.245 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34158 10 6452 1 2025-11-17 20:43:30.302 00:00:10.370 TCP 23.104.0.1:51460 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:43:33.465 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36838 10 6452 1 2025-11-17 20:44:00.285 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 20:44:00.170 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 20:44:30.705 00:00:10.370 TCP 23.104.0.1:48718 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:44:33.671 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46882 10 6452 1 2025-11-17 20:40:58.891 00:05:04.906 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 20:45:31.111 00:00:10.365 TCP 23.104.0.1:42908 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:45:33.879 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52656 10 6452 1 2025-11-17 20:41:58.894 00:05:04.899 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 20:46:31.516 00:00:10.365 TCP 23.104.0.1:47710 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:46:34.102 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55856 10 6452 1 2025-11-17 20:47:34.319 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57642 10 6452 1 2025-11-17 20:47:31.923 00:00:10.336 TCP 23.104.0.1:35504 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:48:32.295 00:00:10.365 TCP 23.104.0.1:49700 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:48:34.526 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57812 10 6452 1 2025-11-17 20:49:00.280 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 20:49:00.464 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 20:49:34.736 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:34332 10 6452 1 2025-11-17 20:49:32.697 00:00:10.324 TCP 23.104.0.1:58602 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:50:34.907 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57038 10 6452 1 2025-11-17 20:50:33.059 00:00:10.323 TCP 23.104.0.1:50866 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:46:58.893 00:05:04.905 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 20:51:35.130 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50512 10 6452 1 2025-11-17 20:51:33.420 00:00:10.326 TCP 23.104.0.1:57366 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:47:58.896 00:05:04.905 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 20:52:33.786 00:00:10.375 TCP 23.104.0.1:46266 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:52:35.299 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42242 10 6452 1 2025-11-17 20:53:34.199 00:00:10.335 TCP 23.104.0.1:51856 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:53:35.511 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51394 10 6452 1 2025-11-17 20:54:00.337 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 20:54:00.451 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 20:54:34.581 00:00:10.368 TCP 23.104.0.1:55672 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:54:35.685 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:39644 10 6452 1 2025-11-17 20:55:34.986 00:00:10.335 TCP 23.104.0.1:57372 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:55:35.870 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45610 10 6452 1 2025-11-17 20:56:35.357 00:00:10.997 TCP 23.104.0.1:36476 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:56:36.066 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:42750 10 6452 1 2025-11-17 20:52:58.902 00:05:04.901 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 20:57:36.390 00:00:10.367 TCP 23.104.0.1:35312 -> 1.101.0.1:3000 11 1507 1 2025-11-17 20:57:36.309 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37034 10 6452 1 2025-11-17 20:53:58.902 00:05:04.898 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 20:58:36.524 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37270 10 6452 1 2025-11-17 20:58:36.791 00:00:10.367 TCP 23.104.0.1:36258 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502684, total packets: 1578, avg bps: 1115, avg pps: 0, avg bpp: 318 Time window: 2025-11-17 19:58:58 - 2025-11-17 20:59:03 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0031s User: 0.0021s Wall: 0.0020s flows/second: 83927.0 Runtime: 0.0020s